4 ms·
- Kext == Kernel Extension - System Integrity Protection (or SIP) is a feature where various core operating system files around the boot process and kernel must
by charrondev 4y ago
- Kext == Kernel Extension
- System Integrity Protection (or SIP) is a feature where various core operating system files around the boot process and kernel must be signed by Apple or the machine will not boot. It can be disabled, but this leaves your machine in a much more insecure state and can cause certain features to be disabled. I know for example I would get reamed by my companies InfoSec team I had SIP disabled on my corporate machine.
- Rosetta 2 is an transparent and efficient x86 -> to ARM64 translation layer on MacOS. It’s used on Macs with apples m series of processors to run old software that hasn’t been recompiled for the new architecture. It runs quite efficiently actually with ~15% performance overhead in my experience. Rosetta 1 was and older version of the same thing from the last Mac CPU architecture change (PowerPC -> x86)
- flangola7 4y agoIt doesn't allow the developer to sign their own kernel extensions? That's seems mighty asymmetric.
- charrondev 4y agoA developer can sign their own kernel extensions, even on M1. It just requires you to initially set the machine into a specific mode that allows it. The people this puts pressure on is not individuals trying to write or sign their own kernel extensions if they know what they are doing (essentially reboot into recovery and run some some shell commands). It does prevent - Unsuspecting or otherwise ignorant users from being tricked into installing a malicious kernel extension. - Prevent large companies from distributing custom kernel extensions for every day users
- deleted 4y ago[deleted]